Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: NKmuWODlCJto4xZxO6Lm/99ejp7S84Bn3mV8yPjl5n0=
Subject key identifier: 69:C5:3C:50:9A:63:24:8C:C9:41:A8:28:FE:2B:09:1F:F8:92:8F:89
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 0197B7B2F36C062B1F170E8B7B692B58E351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 140D
Signing time: Sat 28 Jun 2025 18:00:47 +0000
Manifest this update: Sat 28 Jun 2025 18:00:47 +0000
Manifest next update: Sun 29 Jun 2025 18:00:47 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: g+Nufkqbp93I8hH7NUb3JP9S64m8G3GJ0iSl+xXCi5I=)
2: JysSz_R1K3TNaznJ02DbQNBve_s.roa (hash: BaOSaAFh8MSaQI0AxI9H+YSRs1439Nfg5CR//S5kRHM=)
3: cPSt1cBK1yUkGNEnPd-jB0H0f98.roa (hash: 6XTiW18fxhFDL+0aNweHaTDamcOXmMJdNCPIYbjuHV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:f3:6c:06:2b:1f:17:0e:8b:7b:69:2b:58:e3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Jun 28 18:00:47 2025 GMT
Not After : Jun 29 18:00:47 2025 GMT
Subject: CN=69c53c509a63248cc941a828fe2b091ff8928f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:e0:d1:cf:ba:42:e1:47:28:06:04:82:40:
d7:f8:01:fa:ce:66:da:8d:2c:f8:2f:3a:05:a6:da:
2e:92:8e:1b:00:64:1e:c2:6e:98:64:14:90:39:ae:
10:87:06:2d:a6:46:70:aa:1b:33:1a:41:9a:a7:ae:
bd:4b:8a:7d:b5:17:2e:b9:77:3f:c3:a4:e8:50:0e:
88:d5:01:0d:31:04:60:82:f0:cb:57:a6:4d:02:b9:
28:fc:02:1f:09:7e:61:12:f4:11:2f:a8:b0:5e:bc:
67:79:ec:bd:44:d1:e2:36:07:db:e5:08:92:85:d4:
29:8e:e2:da:c6:e1:eb:bc:e2:a4:78:3a:dc:91:bf:
84:29:2c:35:10:a1:b5:f6:20:62:33:13:0b:7e:0b:
c2:92:b6:25:dc:02:41:9a:8d:85:72:4d:5c:5b:8b:
9e:73:de:05:f3:ce:51:46:20:4a:7f:00:ca:53:52:
e1:5d:3a:09:0d:7b:73:6e:98:b1:f7:62:be:9f:d3:
87:fb:09:e9:25:1a:3c:92:51:98:65:08:fe:cf:ac:
5f:3d:e4:d9:b7:3a:0b:98:28:01:3f:0f:3e:ed:3e:
a5:1b:2c:89:df:a7:8d:87:46:53:63:12:84:84:bc:
8d:97:89:55:ca:15:0c:b8:9e:73:9a:b0:7c:43:4a:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:3C:50:9A:63:24:8C:C9:41:A8:28:FE:2B:09:1F:F8:92:8F:89
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5f:16:c6:7a:0c:95:0e:ab:9f:09:a1:83:19:46:8c:b2:cc:
e8:7b:48:b2:7c:53:00:4d:58:33:e4:34:54:c6:02:d0:f7:d3:
1b:9a:90:9f:4e:34:8c:9b:9b:ce:10:ec:50:b0:9b:36:7d:5a:
c3:17:89:c7:6a:0b:82:40:19:37:39:a1:ef:68:cd:2c:9a:22:
7a:47:7f:9e:b6:1c:14:35:39:79:a9:31:e6:4a:a5:bd:ba:6a:
1e:5b:1b:47:7b:d0:5b:47:39:b4:4f:37:2e:9b:38:9f:82:69:
35:90:25:65:b2:de:cf:29:a8:52:12:1b:25:9c:a1:54:0e:19:
cf:00:a5:58:45:3b:14:59:82:e0:ab:54:ae:35:3b:54:72:ed:
de:41:b7:72:3b:46:87:a7:f9:9d:a3:44:0b:56:26:15:4b:8f:
6f:16:ff:49:d4:92:b7:fc:64:61:b7:70:3d:5d:02:ab:7e:53:
d7:41:26:5e:d8:6c:eb:83:1d:27:99:6b:60:17:75:64:28:ff:
c3:ce:82:9b:3a:f2:de:68:90:15:f5:dc:ee:cc:43:10:cb:04:
f0:3d:fa:8c:91:7d:45:e6:2d:30:53:96:04:8d:29:fd:5a:6d:
2a:69:1f:38:e0:7d:57:d2:55:9e:54:f6:ee:c2:71:70:79:d6:
6b:c4:3c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:30 2025 by rpki-client